The Agent Skills Directory

[DATA_EXFILTRATION]: The scripts/query.mjs utility contains a path traversal vulnerability in the file command. The CloneDataReader.readFile method uses path.join with a user-supplied relative path without validating that the result remains within the intended output directory. This could be exploited to read sensitive files from the host system by providing paths such as ../../etc/passwd.
[DATA_EXFILTRATION]: The browser launch configuration in scripts/lib/browser.mjs uses the --disable-web-security and --no-sandbox flags. Disabling these security boundaries while visiting arbitrary, potentially malicious external URLs increases the risk of the execution environment being compromised by browser exploits.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external URLs, which constitutes a significant attack surface.
Ingestion points: Captured web content is stored in JSON files via scripts/lib/init.mjs, scripts/lib/skeleton.mjs, and scripts/lib/section-styles.mjs.
Boundary markers: No delimiters or instructions are provided to the agent to treat the captured data as untrusted or to ignore instructions embedded in the data.
Capability inventory: The skill possesses file read/write access and network capabilities via Playwright.
Sanitization: The extracted text and metadata are stored and later read by the agent without any filtering or sanitization, creating a surface for indirect prompt injection attacks.
[COMMAND_EXECUTION]: The scripts/lib/browser.mjs file uses execSync to perform environment setup, including installing the playwright package and the Chromium browser binary.
[EXTERNAL_DOWNLOADS]: The skill fetches the Playwright framework and Chromium browser from public registries. It also downloads assets from target web pages during the cloning process using the scripts/lib/assets.mjs script.
[DYNAMIC_EXECUTION]: The scripts/lib/injected-function.mjs script uses the new Function() constructor to wrap and execute JavaScript code that is injected into the browser context for data extraction.

clone-page